| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: bind9.18 | Distribution: AlmaLinux |
| Version: 9.18.29 | Vendor: AlmaLinux |
| Release: 14.el9_8.10 | Build date: Thu Oct 8 12:42:18 2026 |
| Group: Unspecified | Build host: ppc64le-builder01.almalinux.org |
| Size: 2049358 | Source RPM: bind9.18-9.18.29-14.el9_8.10.src.rpm |
| Packager: AlmaLinux Packaging Team <packager@almalinux.org> | |
| Url: https://www.isc.org/downloads/bind/ | |
| Summary: The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) server | |
BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.
MPL-2.0 AND ISC AND MIT AND BSD-3-Clause AND BSD-2-Clause
* Thu Sep 17 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14.10
- Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666)
- Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563)
- Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274)
- Reject oversized negative cached records early (CVE-2026-19667)
- Set limit to following HTTPS/SVCB aliases (CVE-2026-81736)
* Wed Sep 02 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14.9
- Add new root key 38696 into package files (RHEL-255223)
- Update built-in anchors in delv and named
* Sat Jul 25 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.8
- Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704)
* Fri Jul 24 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.7
- Reject out-of-zone NSEC next owner names (CVE-2026-13321,
RHEL-213314)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.6
- Fix cache exhaustion via dns_slabheaders (CVE-2026-11622,
RHEL-213389)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.5
- Reject invalid signed wildcard records (CVE-2026-11721,
RHEL-213417)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.4
- Fix RPZ wildcard expansion self-referential CNAME
(CVE-2026-11331, RHEL-213495)
* Thu Jul 23 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 32:9.18.29-14.3
- Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204,
RHEL-213495)
* Mon May 25 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14.2
- Fix GSS-API resource leak (CVE-2026-3039)
- Invalid handling of CLASS != IN (CVE-2026-5946)
* Wed Apr 01 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14.1
- Correct backport issue in the patch (CVE-2026-1519)
* Fri Mar 27 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-14
- Prevent Denial of Service via maliciously crafted DNSSEC-validated zone
(CVE-2026-1519)
* Thu Jan 29 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-13
- Correct changelog version of previous change
* Wed Jan 28 2026 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-12
- Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053)
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-11
- Add sysusers named user creation (RHEL-132053)
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-10
- Add missing bind-chroot subdirectories
* Fri Dec 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-9
- Create /var/named directories for bind-chroot (RHEL-132053)
* Fri Oct 31 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-8
- Copy named.* files from /usr/share/named into var/named
* Fri Oct 31 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-7
- Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
- Add upstream created test to this regression
* Thu Oct 23 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-6
- Refuse malformed DNSKEY records (CVE-2025-8677)
- Address various spoofing attacks (CVE-2025-40778)
- Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
* Fri Sep 12 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-5
- logrotate: skip if empty and remove old variants (RHEL-113942)
* Tue Jun 10 2025 Petr Mensik <pemensik@redhat.com> - 32:9.18.29-4
- Prevent name.c:670 attributes assertion failed (RHEL-30407)
- Add extra checks for relative names
* Mon Feb 03 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-3
- Limit additional section records CPU processing (CVE-2024-11187)
- Read HTTPS requests in limited chunks and prevent overload (CVE-2024-12705)
* Mon Jan 27 2025 Petr Menšík <pemensik@redhat.com> - 32:9.18.29-2
- Backport nsupdate TLS support into 9.18 (RHEL-76331)
- Update nsupdate manual about new TLS options
- Test nsupdate TLS support
/etc/logrotate.d/named /etc/named /etc/named.conf /etc/named.rfc1912.zones /etc/named.root.key /etc/rndc.conf /etc/rndc.key /etc/rwtab.d/named /etc/sysconfig/named /run/named /usr/bin/mdig /usr/bin/named-checkconf /usr/bin/named-journalprint /usr/bin/named-rrchecker /usr/lib/.build-id /usr/lib/.build-id/2c /usr/lib/.build-id/2c/e790e2e003ae0c1e476a0842577d7b823b124a /usr/lib/.build-id/6e /usr/lib/.build-id/6e/620bb606edd030c7819aa06065bf58f686708c /usr/lib/.build-id/6f /usr/lib/.build-id/6f/5e89ec3ff9079cf503065eb42c0025584cdfca /usr/lib/.build-id/71 /usr/lib/.build-id/71/6b296f138dbd0036a8fbcee64a1a378f67880c /usr/lib/.build-id/a1 /usr/lib/.build-id/a1/8e5c3a27e0d9a5c5aa78bc12a27ee4779fcebd /usr/lib/.build-id/af /usr/lib/.build-id/af/5ad6c701feeb3813183d1f889b4e0ebc53b358 /usr/lib/.build-id/e5 /usr/lib/.build-id/e5/257cac8de2dea844be3c6f5a5e80bb141ca848 /usr/lib/.build-id/ef /usr/lib/.build-id/ef/3e7d7ff5c4b168a7d41309e4713f1498b593e7 /usr/lib/.build-id/f5 /usr/lib/.build-id/f5/d791f74dce4b55640fe0361551cdba46fbb86d /usr/lib/systemd/system/named-setup-rndc.service /usr/lib/systemd/system/named.service /usr/lib/sysusers.d/bind9.18.conf /usr/lib/tmpfiles.d/named.conf /usr/lib64/bind /usr/lib64/bind/filter-a.so /usr/lib64/bind/filter-aaaa.so /usr/lib64/named /usr/libexec/generate-rndc-key.sh /usr/libexec/setup-named-softhsm.sh /usr/sbin/named /usr/sbin/named-checkconf /usr/sbin/rndc /usr/sbin/rndc-confgen /usr/share/doc/bind9.18 /usr/share/doc/bind9.18/CHANGES /usr/share/doc/bind9.18/README.md /usr/share/doc/bind9.18/named.conf.default /usr/share/doc/bind9.18/sample /usr/share/doc/bind9.18/sample/etc /usr/share/doc/bind9.18/sample/etc/named.conf /usr/share/doc/bind9.18/sample/etc/named.rfc1912.zones /usr/share/doc/bind9.18/sample/var /usr/share/doc/bind9.18/sample/var/named /usr/share/doc/bind9.18/sample/var/named/data /usr/share/doc/bind9.18/sample/var/named/my.external.zone.db /usr/share/doc/bind9.18/sample/var/named/my.internal.zone.db /usr/share/doc/bind9.18/sample/var/named/named.ca /usr/share/doc/bind9.18/sample/var/named/named.empty /usr/share/doc/bind9.18/sample/var/named/named.localhost /usr/share/doc/bind9.18/sample/var/named/named.loopback /usr/share/doc/bind9.18/sample/var/named/slaves /usr/share/doc/bind9.18/sample/var/named/slaves/my.ddns.internal.zone.db /usr/share/doc/bind9.18/sample/var/named/slaves/my.slave.internal.zone.db /usr/share/man/man1/mdig.1.gz /usr/share/man/man1/named-checkconf.1.gz /usr/share/man/man1/named-journalprint.1.gz /usr/share/man/man1/named-rrchecker.1.gz /usr/share/man/man5/named.conf.5.gz /usr/share/man/man5/rndc.conf.5.gz /usr/share/man/man8/filter-a.8.gz /usr/share/man/man8/filter-aaaa.8.gz /usr/share/man/man8/named.8.gz /usr/share/man/man8/rndc-confgen.8.gz /usr/share/man/man8/rndc.8.gz /usr/share/named /usr/share/named/named.ca /usr/share/named/named.empty /usr/share/named/named.localhost /usr/share/named/named.loopback /var/log/named.log /var/named /var/named/data /var/named/dynamic /var/named/named.ca /var/named/named.empty /var/named/named.localhost /var/named/named.loopback /var/named/slaves
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Oct 11 08:39:00 2026